[Openvas-discuss] Modifying the OpenVAS SSL config

2014-12-08 Thread Kevin Neely
Hello list, Can someone point me to the SSL configuration settings for OpenVAS 7? I would like to eliminate SSLv3 and specifiy the ciphers, but all i see in /etc/openvas/openvassd.conf is the settings for the Certificate files: # Certificates # cert_file= etc. thank you, K

Re: [Openvas-discuss] Modifying the OpenVAS SSL config

2014-12-08 Thread Reindl Harald
Am 08.12.2014 um 19:03 schrieb Kevin Neely: Can someone point me to the SSL configuration settings for OpenVAS 7? I would like to eliminate SSLv3 and specifiy the ciphers, but all i see in /etc/openvas/openvassd.conf is the settings for the Certificate files: hardcoded - a design flaw

Re: [Openvas-discuss] Modifying the OpenVAS SSL config

2014-12-08 Thread Chris
Am 08.12.2014 um 19:05 schrieb Reindl Harald: hardcoded - a design flaw not really: http://lists.wald.intevation.org/pipermail/openvas-discuss/2014-November/007077.html ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org

Re: [Openvas-discuss] Modifying the OpenVAS SSL config

2014-12-08 Thread Kevin Neely
On 12/08/2014 10:15 AM, Chris wrote: Am 08.12.2014 um 19:05 schrieb Reindl Harald: hardcoded - a design flaw not really: http://lists.wald.intevation.org/pipermail/openvas-discuss/2014-November/007077.html Thank you for the answers, this helps quite a bit. Is there any further

Re: [Openvas-discuss] Modifying the OpenVAS SSL config

2014-12-08 Thread Hani Benhabiles
On 2014-12-08 19:13, Kevin Neely wrote: On 12/08/2014 10:15 AM, Chris wrote: Am 08.12.2014 um 19:05 schrieb Reindl Harald: hardcoded - a design flaw not really: http://lists.wald.intevation.org/pipermail/openvas-discuss/2014-November/007077.html Thank you for the answers, this helps

Re: [Openvas-discuss] Modifying the OpenVAS SSL config

2014-12-08 Thread Chris
Hi, For example, the article shows: gsad --gnutls-priorities=SECURE128:-AES-128-CBC:-CAMELLIA-128-CBC:-VERS-SSL3.0:-VERS-TLS1.0 However, in my limited understanding of POODLE, SSLv3 using CBC ciphers are vulnerable to that MITM attack. SSLv3 is disabled via the: -VERS-SSL3.0 string.

Re: [Openvas-discuss] Modifying the OpenVAS SSL config

2014-12-08 Thread Reindl Harald
Am 08.12.2014 um 19:15 schrieb Chris: Am 08.12.2014 um 19:05 schrieb Reindl Harald: hardcoded - a design flaw not really: http://lists.wald.intevation.org/pipermail/openvas-discuss/2014-November/007077.html such settings belong in a config file, otherwise if you install from packages

Re: [Openvas-discuss] Knowledge base isn't being saved after a scan

2014-12-08 Thread Wiza, David
Is there an easy way to downgrade the scanner to 3.3 or 3.4? When I did sudo yum downgrade openvas-scanner-3.3.1-4.el6.art, it succeeded, but trying to start the scanner service complains with '/usr/sbin/openvassd: error while loading shared libraries: libopenvas_misc.so.5: cannot open shared

[Openvas-discuss] (no subject)

2014-12-08 Thread rahul m
Hello, I am facing a problem in openvas-setup if anyone could help me please. following is the problem:: @localhost /]# openvas-setup Openvas Setup, Version: 0.5 Step 1: Update NVT's and SCAP data Please note this step could take some time. Once completed, NVT's and SCAP data will be

[Openvas-discuss] problem installing openvas in centos7

2014-12-08 Thread rahul m
hi all following is the issue:: [root@localhost /]# openvas-setup Openvas Setup, Version: 0.5 Step 1: Update NVT's and SCAP data Please note this step could take some time. Once completed, NVT's and SCAP data will be updated automatically every 24 hours Updating NVTs [i] This script

Re: [Openvas-discuss] problem installing openvas in centos7

2014-12-08 Thread Chris
Hi, rsync: failed to connect to feed.openvas.org[http://feed.openvas.org] (78.47.251.61): Connection refused (111) rsync error: error in socket IO (code 10) at clientserver.c(122) [Receiver=3.0.9] [e] Error: rsync failed. just tested this and works as expected. Are you able to ping this

Re: [Openvas-discuss] Modifying the OpenVAS SSL config

2014-12-08 Thread Chris
Hi, such settings belong in a config file, otherwise if you install from packages the modified sysvinit script get overwritten until you are on systemd based distributions where you can place your units in /etc/systemd/system sure it could be useful to have such a setting in a config